Cisco ASA 5506-X Ping Problem
Hallo,
Hosts vom inside Interface sollen ein Gateway hinter dem outside Interface anpingen können, was aktuell trotz "icmp inspection" (siehe running-conf) noch nicht funktioniert. Bin dankbar für jegliche Hilfe
:
ASA Version 9.6(1)
!
hostname ciscoasa
names
!
interface GigabitEthernet1/1
description Labor
nameif inside
security-level 100
ip address 192.168.2.1 255.255.255.0
!
interface GigabitEthernet1/2
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/3
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/4
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/5
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/6
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/7
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/8
description ctk
nameif outside
security-level 0
ip address 192.168.1.1 255.255.255.0
!
interface Management1/1
management-only
no nameif
no security-level
no ip address
shutdown
!
object network new
subnet 192.168.1.0 255.255.255.0
!
route outside 0.0.0.0 0.0.0.0 192.168.1.5 1
!
!
!
object network new
nat (inside,outside) dynamic interface
!
!
!
class-map inspection_default
match default-inspection-traffic
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect icmp
!
service-policy global_policy global
!
telnet timeout 5
ssh timeout 5
!
!
!
!
Hosts vom inside Interface sollen ein Gateway hinter dem outside Interface anpingen können, was aktuell trotz "icmp inspection" (siehe running-conf) noch nicht funktioniert. Bin dankbar für jegliche Hilfe
:
ASA Version 9.6(1)
!
hostname ciscoasa
names
!
interface GigabitEthernet1/1
description Labor
nameif inside
security-level 100
ip address 192.168.2.1 255.255.255.0
!
interface GigabitEthernet1/2
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/3
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/4
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/5
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/6
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/7
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/8
description ctk
nameif outside
security-level 0
ip address 192.168.1.1 255.255.255.0
!
interface Management1/1
management-only
no nameif
no security-level
no ip address
shutdown
!
object network new
subnet 192.168.1.0 255.255.255.0
!
route outside 0.0.0.0 0.0.0.0 192.168.1.5 1
!
!
!
object network new
nat (inside,outside) dynamic interface
!
!
!
class-map inspection_default
match default-inspection-traffic
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect icmp
!
service-policy global_policy global
!
telnet timeout 5
ssh timeout 5
!
!
!
!
Bitte markiere auch die Kommentare, die zur Lösung des Beitrags beigetragen haben
Content-ID: 2079706001
Url: https://administrator.de/contentid/2079706001
Ausgedruckt am: 22.11.2024 um 07:11 Uhr
3 Kommentare
Neuester Kommentar
Einmal fixup protocol ICMP versucht ?
https://www.geeksforgeeks.org/default-flow-of-traffic-asa/?ref=lbp
https://www.geeksforgeeks.org/default-flow-of-traffic-asa/?ref=lbp